Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
File:                     86157283-dfb4-320d-a963-3877e2d61db2.roa (raw, json)
Hash identifier:          zflk7u+GPbyuZvsF1fbNtqnuwAp3V0M5UKC0/wlbmEg=
Subject key identifier:   BF:36:56:1B:F8:9D:99:71:CB:97:88:60:F8:4D:C9:CA:5D:2D:21:88
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849E4EFC65E0A27B7918A2D5770
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     5650
IP address blocks:        104.253.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c6:5e:0a:27:b7:91:8a:2d:57:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=e0fefd0c-e7ad-4e29-99cd-4e2e91439d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:db:65:cb:6d:83:10:9b:50:ef:54:84:0e:
                    08:2f:06:6d:a5:1a:3c:d9:03:69:94:73:cc:90:43:
                    e8:97:a8:58:f0:a0:bb:7d:19:14:43:5c:e1:fb:0e:
                    5c:fe:d8:37:45:7a:bf:f3:a5:b8:78:b6:43:1f:80:
                    38:76:db:8f:cf:5f:5c:ee:2a:1e:8a:6b:a4:5f:f3:
                    ae:fc:7b:af:df:36:fa:89:b0:e9:11:49:bc:48:56:
                    00:b7:1c:d0:60:02:36:24:7b:dd:68:2d:37:cd:5f:
                    fd:b3:57:b5:d1:e3:d3:6a:07:ef:f6:c1:7c:67:03:
                    1a:e2:55:89:33:83:6c:34:42:17:de:64:6a:54:17:
                    73:14:ac:7b:fa:85:c8:4a:06:ed:bb:3a:92:84:50:
                    5b:3b:38:e5:e4:eb:ff:c3:e3:38:ad:cd:15:a9:05:
                    39:40:2f:74:76:7a:a4:ca:9b:7d:63:ae:7a:0d:89:
                    f2:9a:8d:5a:e1:6b:2f:99:12:c6:93:a4:f2:14:3b:
                    97:da:a4:5b:45:f9:e0:63:18:6d:a5:a9:37:d6:06:
                    66:6c:bc:a0:2d:b2:86:51:25:51:10:69:70:48:8f:
                    19:12:e0:0a:e6:7a:c6:a8:08:3f:54:00:44:83:80:
                    d1:91:b7:ba:a9:4d:70:d5:fa:6a:8b:58:a8:09:78:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:56:1B:F8:9D:99:71:CB:97:88:60:F8:4D:C9:CA:5D:2D:21:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ec:0a:85:fb:b1:5d:05:c2:95:a0:5b:0c:38:fa:59:62:19:
         6d:6c:94:68:49:9c:c9:58:34:54:d7:b5:bb:50:33:97:a2:5b:
         ed:71:af:0d:6a:1b:03:a5:b1:50:82:d6:7e:e0:21:b1:3c:12:
         30:ea:a7:95:7d:6a:f3:91:42:2b:a1:95:e6:b2:e0:7a:48:fa:
         69:d3:db:46:c6:a8:5c:79:5c:10:05:b1:d6:c0:45:f9:75:9f:
         2c:9c:34:cb:f1:66:6f:45:33:9b:21:1e:0a:49:0d:83:31:c2:
         be:8f:f8:82:15:ad:9a:46:68:15:a2:e6:98:6f:dc:87:d1:ef:
         36:ff:35:13:b8:a6:88:57:e5:48:ae:c3:a9:45:a6:cf:d5:b7:
         de:11:33:d0:dc:39:66:da:f0:53:9f:8e:13:05:9e:ad:78:31:
         e8:8d:f9:f0:50:a9:1b:83:bc:ab:70:97:41:9e:fe:83:e7:9b:
         fd:0c:dc:f9:7c:d3:fa:d6:fd:5f:d6:a3:f7:2f:94:e3:7e:7e:
         62:58:ad:68:9f:dc:03:7f:1f:30:c5:0f:dc:ad:db:66:ec:e0:
         92:24:ea:c8:7f:44:dd:54:ad:37:a4:68:9f:11:6f:f3:8e:96:
         d3:fd:67:c7:bb:38:c0:9c:ce:37:23:c8:8e:98:58:7c:3c:1a:
         aa:69:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:54:31 2025 by rpki-client